Extracting prog: 52.589432522s Minimizing prog: 35m52.52592788s Simplifying prog options: 0s Extracting C: 34.482223453s Simplifying C: 2m56.570136828s extracting reproducer from 72 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT-write$UHID_INPUT-mmap-mmap-openat-openat detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) openat(r10, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) (async) openat(r10, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) program crashed: KASAN: use-after-free Write in l2tp_session_delete single: successfully extracted reproducer found reproducer with 40 syscalls minimizing guilty program testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT-write$UHID_INPUT-mmap-mmap-openat detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) openat(r10, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) (async) program crashed: KASAN: use-after-free Write in l2tp_session_delete testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT-write$UHID_INPUT-mmap-mmap detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT-write$UHID_INPUT-mmap detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) program crashed: KASAN: use-after-free Write in l2tp_session_delete testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT-write$UHID_INPUT detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) program crashed: KASAN: use-after-free Write in rcu_segcblist_enqueue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro-write$UHID_INPUT detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) program crashed: KASAN: use-after-free Write in l2tp_session_delete testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN-openat$cgroup_ro detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) program crashed: KASAN: use-after-free Write in l2tp_session_delete testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN-ioctl$PPPIOCBRIDGECHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) program crashed: KASAN: use-after-free Write in l2tp_session_delete testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-connect$pppl2tp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-socket$inet6_udp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$pppl2tp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-readlinkat-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-splice-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r5 = syz_open_pts(r4, 0x60300) dup3(r5, 0xffffffffffffffff, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r1, 0x0, 0x7ffff000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-dup3-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r4 = syz_open_pts(r3, 0x60300) dup3(r4, 0xffffffffffffffff, 0x0) (async) dup3(r4, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-dup3-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) r4 = syz_open_pts(r3, 0x60300) dup3(r4, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-syz_open_pts-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) syz_open_pts(r3, 0x60300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-ioctl$TCSETS-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-ioctl$TCSETS-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000800)={0x80000, 0x7, 0x400007f, 0x230c, 0x4b, "422feaffffe1027e4f00000000000000000100"}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-write$binfmt_aout-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-openat$ptmx-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200380, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_DELETE_ELEM-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000700)="4b305a23f34cf7846cf2188a61e8794ef991049bbd28323e8e6842362958230727cd315884ae1e1ca4ec9443d6d0c5b67511bc800608d704261c45260c579c512efdd73aac686f7edb441e71907e6f2703a665dab18aa96e3a391f8b8ae1baefcc15756c1d849d125f7ad58ed2099f744600ece6d50caebcc404ff35110443ad8200f8b08a71a6410fc3e574f7c7fab8f9ae21c0dfd1f53a86"}, 0x20) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM_TAIL_CALL-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-bpf$MAP_UPDATE_ELEM-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$eJzs3c1rXFUfAODfnUnSr7xN3vet1dZWo1UMfiRN+mEXLlQUBBUEXdRlTNJaO22kidCWoFGkrgvuxaXg0pU7N6IuxD9AQXAjhaJBaSoKkXtnbpL5SqZN4pjkeWA659w5995z7j0nc+45c28D2LL60n+SiO6I+D4iesrR6gR95be52enRm7PTo0nMz7/8S5KluzE7PZonzdfbVYn0FyIK7yfxZFK/38lLl8+OlErjFyrxwalzbw5OXrr82JlzI6fHT4+fHz5x4uiRocePDx+rWq/BpursaLAsLdeN/W9PHNj33KtXXxw9efW1rz9Nt7X3YPnzSjm6Wth8xM26XDwfMVOXrC89ar/OZ2o/e7ClHW0c/1kSTjramBFuSTEi0tPVmbX/nijG4snriWffa2vmgHWVfjdta/7xzDywiSXR7hwA7ZF/0afXv/kr/qrqAwz9tK49kPa6/tTiRf/c7PTo3MJ4RkcUKss713H/fRFxcuaPj9JX1IynAACsh6xv82hN/y9TiL3Ze3muY3dlDqU3Iv4bEf+LiP9HxJ6IuCMiS3tnRNxVXnm+p8X999XE6/s/hWsN87xG0v7fE0v6fnOz09XDYYXoLWZv5TmO3uhMTp0pjR+uHJP+6NyWxoeW2ccXzzSfVlra/0tfaR5qMnCto7xgYSNjI1Mja3UQrr8bsb+jqvyV458szASkNWBfROy/tU3vzgNnHv7kQLNEjcqf94VXtAbzTPMfRzxUPv8zUVP+XNJkfjKt48eHjw1uj9L44cG8VtT75rsrLzXb/6rKvwbS87+zuv7XpOj5LSnP13ZGqTR+YfLW93Hlhw+aXtOsXP6F+r8grf9dySvZnPW3r5eXXRyZmrowFNGVvJDFu+L39G17pMuHF9e9WInn6dPy9x9qVP8L2d+4qJz/uyMircQHI3bfExH3VvJ+X0TcHxGHlin/V08/8MYy5U8iibae/7Fo3P4repOl8/W3ESie/fLzZvP2rZ3/o9nsen9lSfb3bwWtZnCVhw8AAAA2hEJEdEdSGCiH+7qjUBgYKP+Gf0/sLJQmJqceOTXx1vmx8j0CvdFZyEe6epaMhw4l+e/fy/Hhylhx/vmRyrjxh8UdWXxgdKI01uayw1a3q7r9R97+Uz8X2507YN01n0db5tYAYFOobf+FNuUD+Oe18jsa1wKwOTVo/0ueofFn9a1C9c+5ADawjgYhYGto1OrfqYnX9f8bPWUL2HDq2/+PDR5ZB2xGev2wdWn/sHVp/7Alrea+/tsP5DcLLJs4z2LDNNtbvsN/qwTyx8Os5752xOKSKGSB7mi61s52HY18rHrZxD2tbDAiPlt1foprUK60xVQvKa5UwFUGWv3PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7d/g4AAP//5sziMA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-sendmsg$NFT_BATCH-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x48040) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-bpf$MAP_CREATE-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-bpf$MAP_CREATE-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x50) (async) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-socketpair-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-pipe-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000440)) unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800700, &(0x7f0000001980)={[{@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4ea, &(0x7f0000000200)="$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") unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) program did not crash testing program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session extracting C reproducer testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session simplifying C reproducer testing compiled C program (duration=33.843024151s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program did not crash testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session validation run: crashed=true testing program (duration=33.843024151s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-openat$ppp-openat$ppp-ioctl$PPPIOCATTCHAN detailed listing: executing program 0: unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) program crashed: KASAN: use-after-free Write in rcu_segcblist_enqueue validation run: crashed=true reproducing took 42m0.477149783s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 kernel/rcu/rcu_segcblist.c:346 Write of size 8 at addr ffff888112271990 by task syz.2.17/374 CPU: 0 PID: 374 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x71/0x200 mm/kasan/report.c:316 print_report+0x4a/0x60 mm/kasan/report.c:420 kasan_report+0x122/0x150 mm/kasan/report.c:524 __asan_report_store8_noabort+0x17/0x20 mm/kasan/report_generic.c:356 rcu_segcblist_enqueue+0x9c/0xb0 kernel/rcu/rcu_segcblist.c:346 __call_rcu_common kernel/rcu/tree.c:2827 [inline] call_rcu+0x554/0xf50 kernel/rcu/tree.c:2926 security_inode_free+0xc5/0xe0 security/security.c:1073 __destroy_inode+0x175/0x500 fs/inode.c:289 destroy_inode fs/inode.c:312 [inline] evict+0x777/0x8c0 fs/inode.c:724 iput_final fs/inode.c:1845 [inline] iput+0x633/0x690 fs/inode.c:1871 dentry_unlink_inode+0x346/0x3f0 fs/dcache.c:405 __dentry_kill+0x46c/0x680 fs/dcache.c:611 dentry_kill+0xc0/0x2a0 fs/dcache.c:-1 dput+0x42/0x80 fs/dcache.c:918 __fput+0x5c0/0x8f0 fs/file_table.c:328 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f5cb799ce59 Code: Unable to access opcode bytes at 0x7f5cb799ce2f. RSP: 002b:00007f5cb883a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f5cb7c15fa8 RCX: 00007f5cb799ce59 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5cb7c15fa8 RBP: 00007f5cb7c15fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f5cb7c16038 R14: 00007fffa42e6530 R15: 00007fffa42e6618 Allocated by task 374: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_alloc_info+0x1f/0x30 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:380 [inline] __kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389 kasan_kmalloc include/linux/kasan.h:212 [inline] __do_kmalloc_node mm/slab_common.c:938 [inline] __kmalloc+0xb4/0x1e0 mm/slab_common.c:951 kmalloc include/linux/slab.h:568 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_session_create+0x38/0xbd0 net/l2tp/l2tp_core.c:1609 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:771 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 Freed by task 10: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3df/0x4d0 net/l2tp/l2tp_core.c:1582 l2tp_tunnel_closeall net/l2tp/l2tp_core.c:1228 [inline] l2tp_tunnel_del_work+0x199/0x410 net/l2tp/l2tp_core.c:1266 process_one_work+0x717/0xc30 kernel/workqueue.c:2302 worker_thread+0xa4d/0x11d0 kernel/workqueue.c:2449 kthread+0x281/0x320 kernel/kthread.c:386 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Last potentially related work creation: kasan_save_stack+0x3a/0x60 mm/kasan/common.c:46 __kasan_record_aux_stack+0xb6/0xc0 mm/kasan/generic.c:486 kasan_record_aux_stack_noalloc+0xb/0x10 mm/kasan/generic.c:496 __call_rcu_common kernel/rcu/tree.c:2807 [inline] call_rcu+0xcf/0xf50 kernel/rcu/tree.c:2926 pppol2tp_release+0x1e3/0x2b0 net/l2tp/l2tp_ppp.c:446 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 The buggy address belongs to the object at ffff888112271800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 400 bytes inside of 512-byte region [ffff888112271800, ffff888112271a00) The buggy address belongs to the physical page: page:ffffea0004489c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112270 head:ffffea0004489c00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 ffffea0004510f00 dead000000000002 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 117, tgid 117 (udevadm), ts 3916371241, free_ts 3907243343 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2672 prep_new_page+0x1c/0x110 mm/page_alloc.c:2679 get_page_from_freelist+0x2ca9/0x2d20 mm/page_alloc.c:4586 __alloc_pages+0x1fa/0x610 mm/page_alloc.c:5930 alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1 allocate_slab mm/slub.c:1967 [inline] new_slab+0x98/0x3e0 mm/slub.c:2020 ___slab_alloc+0x70f/0xb70 mm/slub.c:3177 __slab_alloc+0x5e/0xa0 mm/slub.c:3263 slab_alloc_node mm/slub.c:3348 [inline] __kmem_cache_alloc_node+0x204/0x2d0 mm/slub.c:3423 __do_kmalloc_node mm/slab_common.c:937 [inline] __kmalloc_node_track_caller+0xa1/0x1e0 mm/slab_common.c:958 kmalloc_reserve net/core/skbuff.c:449 [inline] __alloc_skb+0x226/0x4a0 net/core/skbuff.c:518 alloc_skb include/linux/skbuff.h:1322 [inline] alloc_uevent_skb+0x85/0x240 lib/kobject_uevent.c:290 uevent_net_broadcast_untagged lib/kobject_uevent.c:326 [inline] kobject_uevent_net_broadcast+0x343/0x5b0 lib/kobject_uevent.c:409 kobject_uevent_env+0x541/0x720 lib/kobject_uevent.c:608 kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208 uevent_store+0x25/0x70 drivers/base/core.c:2690 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1580 [inline] free_pcp_prepare mm/page_alloc.c:1654 [inline] free_unref_page_prepare+0x80c/0x820 mm/page_alloc.c:3621 free_unref_page+0x93/0x530 mm/page_alloc.c:3719 free_the_page mm/page_alloc.c:863 [inline] __free_pages+0x67/0x100 mm/page_alloc.c:6020 free_pages+0x82/0x90 mm/page_alloc.c:6031 __stack_depot_save+0x45f/0x490 lib/stackdepot.c:506 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_set_track+0x60/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 kobject_uevent_env+0x35c/0x720 lib/kobject_uevent.c:641 kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208 uevent_store+0x25/0x70 drivers/base/core.c:2690 dev_attr_store+0x6c/0x90 drivers/base/core.c:2389 Memory state around the buggy address: ffff888112271880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888112271900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888112271980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888112271a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888112271a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 kernel/rcu/rcu_segcblist.c:346 Write of size 8 at addr ffff888112271990 by task syz.2.17/374 CPU: 0 PID: 374 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x71/0x200 mm/kasan/report.c:316 print_report+0x4a/0x60 mm/kasan/report.c:420 kasan_report+0x122/0x150 mm/kasan/report.c:524 __asan_report_store8_noabort+0x17/0x20 mm/kasan/report_generic.c:356 rcu_segcblist_enqueue+0x9c/0xb0 kernel/rcu/rcu_segcblist.c:346 __call_rcu_common kernel/rcu/tree.c:2827 [inline] call_rcu+0x554/0xf50 kernel/rcu/tree.c:2926 security_inode_free+0xc5/0xe0 security/security.c:1073 __destroy_inode+0x175/0x500 fs/inode.c:289 destroy_inode fs/inode.c:312 [inline] evict+0x777/0x8c0 fs/inode.c:724 iput_final fs/inode.c:1845 [inline] iput+0x633/0x690 fs/inode.c:1871 dentry_unlink_inode+0x346/0x3f0 fs/dcache.c:405 __dentry_kill+0x46c/0x680 fs/dcache.c:611 dentry_kill+0xc0/0x2a0 fs/dcache.c:-1 dput+0x42/0x80 fs/dcache.c:918 __fput+0x5c0/0x8f0 fs/file_table.c:328 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f5cb799ce59 Code: Unable to access opcode bytes at 0x7f5cb799ce2f. RSP: 002b:00007f5cb883a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f5cb7c15fa8 RCX: 00007f5cb799ce59 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5cb7c15fa8 RBP: 00007f5cb7c15fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f5cb7c16038 R14: 00007fffa42e6530 R15: 00007fffa42e6618 Allocated by task 374: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_alloc_info+0x1f/0x30 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:380 [inline] __kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389 kasan_kmalloc include/linux/kasan.h:212 [inline] __do_kmalloc_node mm/slab_common.c:938 [inline] __kmalloc+0xb4/0x1e0 mm/slab_common.c:951 kmalloc include/linux/slab.h:568 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_session_create+0x38/0xbd0 net/l2tp/l2tp_core.c:1609 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:771 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 Freed by task 10: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3df/0x4d0 net/l2tp/l2tp_core.c:1582 l2tp_tunnel_closeall net/l2tp/l2tp_core.c:1228 [inline] l2tp_tunnel_del_work+0x199/0x410 net/l2tp/l2tp_core.c:1266 process_one_work+0x717/0xc30 kernel/workqueue.c:2302 worker_thread+0xa4d/0x11d0 kernel/workqueue.c:2449 kthread+0x281/0x320 kernel/kthread.c:386 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Last potentially related work creation: kasan_save_stack+0x3a/0x60 mm/kasan/common.c:46 __kasan_record_aux_stack+0xb6/0xc0 mm/kasan/generic.c:486 kasan_record_aux_stack_noalloc+0xb/0x10 mm/kasan/generic.c:496 __call_rcu_common kernel/rcu/tree.c:2807 [inline] call_rcu+0xcf/0xf50 kernel/rcu/tree.c:2926 pppol2tp_release+0x1e3/0x2b0 net/l2tp/l2tp_ppp.c:446 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 The buggy address belongs to the object at ffff888112271800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 400 bytes inside of 512-byte region [ffff888112271800, ffff888112271a00) The buggy address belongs to the physical page: page:ffffea0004489c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112270 head:ffffea0004489c00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 ffffea0004510f00 dead000000000002 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 117, tgid 117 (udevadm), ts 3916371241, free_ts 3907243343 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2672 prep_new_page+0x1c/0x110 mm/page_alloc.c:2679 get_page_from_freelist+0x2ca9/0x2d20 mm/page_alloc.c:4586 __alloc_pages+0x1fa/0x610 mm/page_alloc.c:5930 alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1 allocate_slab mm/slub.c:1967 [inline] new_slab+0x98/0x3e0 mm/slub.c:2020 ___slab_alloc+0x70f/0xb70 mm/slub.c:3177 __slab_alloc+0x5e/0xa0 mm/slub.c:3263 slab_alloc_node mm/slub.c:3348 [inline] __kmem_cache_alloc_node+0x204/0x2d0 mm/slub.c:3423 __do_kmalloc_node mm/slab_common.c:937 [inline] __kmalloc_node_track_caller+0xa1/0x1e0 mm/slab_common.c:958 kmalloc_reserve net/core/skbuff.c:449 [inline] __alloc_skb+0x226/0x4a0 net/core/skbuff.c:518 alloc_skb include/linux/skbuff.h:1322 [inline] alloc_uevent_skb+0x85/0x240 lib/kobject_uevent.c:290 uevent_net_broadcast_untagged lib/kobject_uevent.c:326 [inline] kobject_uevent_net_broadcast+0x343/0x5b0 lib/kobject_uevent.c:409 kobject_uevent_env+0x541/0x720 lib/kobject_uevent.c:608 kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208 uevent_store+0x25/0x70 drivers/base/core.c:2690 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1580 [inline] free_pcp_prepare mm/page_alloc.c:1654 [inline] free_unref_page_prepare+0x80c/0x820 mm/page_alloc.c:3621 free_unref_page+0x93/0x530 mm/page_alloc.c:3719 free_the_page mm/page_alloc.c:863 [inline] __free_pages+0x67/0x100 mm/page_alloc.c:6020 free_pages+0x82/0x90 mm/page_alloc.c:6031 __stack_depot_save+0x45f/0x490 lib/stackdepot.c:506 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_set_track+0x60/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 kobject_uevent_env+0x35c/0x720 lib/kobject_uevent.c:641 kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208 uevent_store+0x25/0x70 drivers/base/core.c:2690 dev_attr_store+0x6c/0x90 drivers/base/core.c:2389 Memory state around the buggy address: ffff888112271880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888112271900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888112271980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888112271a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888112271a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================